General

  • Target

    6aa51a08107dc1916acb2fd545a1b870373a00d8d38ad030638ca83ff65e7158

  • Size

    88KB

  • Sample

    250106-cr1jxaspfs

  • MD5

    4653f45619e769536486e5fe5d4eb5b5

  • SHA1

    6a85b37d118bb869a56251021a2d19b1c38e57b5

  • SHA256

    6aa51a08107dc1916acb2fd545a1b870373a00d8d38ad030638ca83ff65e7158

  • SHA512

    5b990d00d09de08a1ded568bd708702a05cf667fb77891ef6633f44f0f3af0b4cf562ddb6c402c9025964b1d89d2f636465cae6becf7ba1df3f262ff8b751fdb

  • SSDEEP

    1536:rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5Z:bdseIOMEZEyFjEOFqTiQm5l/5Z

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      6aa51a08107dc1916acb2fd545a1b870373a00d8d38ad030638ca83ff65e7158

    • Size

      88KB

    • MD5

      4653f45619e769536486e5fe5d4eb5b5

    • SHA1

      6a85b37d118bb869a56251021a2d19b1c38e57b5

    • SHA256

      6aa51a08107dc1916acb2fd545a1b870373a00d8d38ad030638ca83ff65e7158

    • SHA512

      5b990d00d09de08a1ded568bd708702a05cf667fb77891ef6633f44f0f3af0b4cf562ddb6c402c9025964b1d89d2f636465cae6becf7ba1df3f262ff8b751fdb

    • SSDEEP

      1536:rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5Z:bdseIOMEZEyFjEOFqTiQm5l/5Z

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks